Security update to Clearstream ICSD online services

13.04.2016

On

21 May 2016

all Java .jar files for CreationOnline, Xact Web Portal and Vestima will be signed with a new code signing certificate, that uses SHA-256 instead of SHA-1 for the signing algorithm.

After 21 May 2016, when a user connects to CreationOnline, Xact Web Portal or Vestima, the updated .jar files will be automatically downloaded.

Users of Xact Web Portal and Vestima should not see any delay in their connection. However, depending on the customer’s bandwidth there may be a delay in CreationOnline as the download over a 1 Mbit DSL line takes around 2 minutes.

After the initial connection the .jar files are cached in the customer’s PC Java cache as well as on the customer’s network proxy, so future connections will not download the files.

On a properly configured PC the whole process is completely automatic and transparent for the end user. However if you are working on an unsupported operating system (for example Windows XP) or Java version (for example Java 6), please check with your IT department  if you have to take any other action.

Please note that the currently provided CreationOnline legacy URL (see technical support page) will be decommissioned in Q3 2016 and customers are requested to use the normal URL www.creationconnect.com/col2.html   or Java Web Start.
If you have problems with this URL please contact the Clearstream Connectivity Helpdesk.